Curated security research, vulnerabilities, advisories and tools for practitioners.

#xss

Security coverage tagged xss. (Page 2)

31.

Arista NextGen Firewall XSS to RCE Chain

blog | 2025-12-04 00:00 | CVE-2025-6980 | bishopfox.com | original ↗ | #rce | #xss | #patching

32.

Grafana CVE-2025-6023 Bypass: A Technical Deep Dive

vulnerability | High | 2025-11-27 00:00 | CVE-2025-6023 | ethiack.com | original ↗ | #vulnerability-research | #attack-chains | #xss

33.

Esbuild's XSS Bug that Survived 5 Billion Downloads and Bypassed HTML Sanitization

research | 2025-11-20 00:00 | depthfirst.com | original ↗ | #supply-chain | #vulnerability-research | #xss

34.

Top 10 JavaScript Security Vulnerabilities in Modern Web Apps

blog | 2025-11-04 00:00 | CVE-2020-11023 | aikido.dev | original ↗ | #npm | #xss | #vulnerabilities

35.

Can Burp AI hack a website? CyberMaddy explores the new agentic capabilities in Burp AI

blog | 2025-10-22 13:15 | portswigger.net | original ↗ | #ai-security | #bug-bounty | #agentic-ai

36.

Top 10 Web Application Security Vulnerabilities Every Team Should Know

blog | 2025-10-20 00:00 | aikido.dev | original ↗ | #web-security | #xss | #deserialization

37.

Beyond Sandbox Domains: Rendering Untrusted Web Content with SafeContentFrame

blog | 2025-09-18 00:00 | bughunters.google.com | original ↗ | #web-security | #xss | #side-channel

38.

Cross-site request forgery: The ultimate Bug Bounty guide to exploiting CSRF vulnerabilities

blog | 2025-09-12 07:03 | yeswehack.com | original ↗ | #bug-bounty | #browser-security | #web-security

39.

Top 10 Code Security Vulnerabilities Found in Modern Applications

blog | 2025-09-09 00:00 | aikido.dev | original ↗ | #cloud | #zero-day | #sql-injection

40.

The Quest for the Shortest Domain

blog | 2025-08-19 00:00 | josephthacker.com | original ↗ | #bug-bounty | #automation | #xss

41.

The guide to blind XSS: Advanced techniques for bug bounty hunters worth $250,000

blog | 2025-08-12 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #web-security | #xss

42.

Bypassing WAFs for Fun and JS Injection with Parameter Pollution

research | 2025-08-04 00:00 | ethiack.com | original ↗ | #web-security | #xss | #waf

43.

Finding XSS in Salesforce Aura Components: How XBOW Got Creative

vulnerability | 2025-07-07 12:00 | xbow.com | original ↗ | #ai-security | #vulnerability-research | #web-security

44.

Access Control vs Account Takeover: What Bug Bounty Hunters Need to Know

blog | 2025-07-03 12:00 | bugcrowd.com | original ↗ | #bug-bounty | #access-control | #account-takeover

45.

Breaking the Shield: How XBOW Discovered Multiple XSS Vulnerabilities in Palo Alto’s GlobalProtect VPN

vulnerability | 2025-06-24 12:00 | CVE-2025-0133 | xbow.com | original ↗ | #bug-bounty | #vulnerability-research | #xss

46.

Escaping '<' and '>' in attributes – how it helps protect against mutation XSS

blog | 2025-06-12 00:00 | bughunters.google.com | original ↗ | #web-security | #xss | #html

47.

XSSpect: A browser extension to automate XSS injection

blog | 2025-04-09 12:00 | bugcrowd.com | original ↗ | #pentesting | #automation | #xss

48.

A Deep Dive into JS Trusted Types Violations

research | 2025-02-27 00:00 | bughunters.google.com | original ↗ | #web-security | #xss | #javascript

49.

XSS attacks and exploitation: The ultimate guide to cross-site scripting

blog | 2025-02-11 12:57 | yeswehack.com | original ↗ | #bug-bounty | #web-security | #xss

50.

Stored Cross-Site Scripting (XSS) in 2FAuth

vulnerability | 2024-12-13 13:00 | CVE-2024-52597 | xbow.com | original ↗ | #vulnerability-research | #open-source | #xss

51.

Breaking Down the OWASP Top 10: Injection

blog | 2024-11-21 18:14 | hackerone.com | original ↗ | #xss | #injection | #ssti

52.

How a Cross-Site Scripting Vulnerability Led to Account Takeover

vulnerability | 2024-11-04 17:50 | hackerone.com | original ↗ | #bug-bounty | #account-takeover | #web-security

53.

Side Effects: When Continuous Development Introduces Security Threats

research | 2024-11-04 09:00 | theori.io | original ↗ | #browser-security | #xss | #http2

54.

Dom-Explorer tool launched to reveal how browsers parse HTML and find mutated XSS vulnerabilities

research | 2024-11-04 12:47 | yeswehack.com | original ↗ | #open-source | #xss | #tooling

55.

Why you aren’t finding bugs

blog | 2024-10-22 15:00 | bugcrowd.com | original ↗ | #bug-bounty | #xss | #idor

56.

Auditing Gradio 5, Hugging Face’s ML GUI framework

blog | 2024-10-10 16:00 | blog.trailofbits.com | original ↗ | #security-audit | #xss | #ssrf

57.

Common Ecommerce Vulnerabilities: Reflected XSS

blog | 2024-06-27 16:00 | hackerone.com | original ↗ | #bug-bounty | #account-takeover | #web-security

58.

ExpressionEngine, Version 7.3.15

vulnerability | 2024-06-17 00:00 | CVE-2024-38454 | bishopfox.com | original ↗ | #xss | #vulnerability-disclosure | #open-redirect

59.

onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet

research | 2024-06-11 14:58 | portswigger.net | original ↗ | #web-security | #xss | #cheat-sheet

60.

3 Bug Bounty Lessons From Retail & eCommerce Customers

blog | 2024-05-31 22:35 | hackerone.com | original ↗ | #bug-bounty | #vulnerability-management | #xss

← Previous More →